Unscored severity · published Apr 17, 2012
CVE-2012-1923
RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under adm_b_db\users\, which allows local users to obtain sensitive information…
–
CVSS
38.3%
EPSS
No
On KEV
Description
RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under adm_b_db\users\, which allows local users to obtain sensitive information by reading a database.
Exploitation
Is it being used?
Exploit prediction (EPSS)38.3% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HM
Helix Mobile Server · Realnetworks
14.0.0; 14.0.1 · source: NVD
HS
Helix Server · Realnetworks
14.0.0; 14.0.1; 14.2; 14.2.0.212 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1923
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1923
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2012-04/0062.html
Vendor Advisory
http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf
secunia.com
http://secunia.com/secunia_research/2012-8/
www.securityfocus.com
http://www.securityfocus.com/bid/52929
www.securitytracker.com
http://www.securitytracker.com/id?1026898
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/74673
More from Helix Mobile Server
–
CVE-2012-2268
master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (unhandled…
–
CVE-2012-2267
master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (daemon crash) by…
–
CVE-2012-1985
Cross-site request forgery (CSRF) vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of…
–
CVE-2012-1984
Multiple cross-site scripting (XSS) vulnerabilities in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allow remote attackers to inject arbitrary web script…
–
CVE-2012-0942
Buffer overflow in rn5auth.dll in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to execute arbitrary code via crafted authentication…